T10000B - Is It Possible to Re-use Tapes That Are Encrypted by OKM as Non-encrypted Tapes?

Asset ID:	1-71-1927992.1
Update Date:	2017-08-09
Keywords:

Solution Type Technical Instruction Sure

Solution 1927992.1 : T10000B - Is It Possible to Re-use Tapes That Are Encrypted by OKM as Non-encrypted Tapes?

Applies to:

Oracle Key Manager - Version 2.0.0 and later
Sun StorageTek T10000B Tape Drive - Version All Versions and later
Information in this document applies to any platform.

Goal

Is it possible to re-use tapes which are encrypted by OKM as non - encrypted tapes?

Solution

Yes this is possible.
The prerequisite is that you have a non-encrypted drive attached to your environment and that you are able to load the cartridge into that drive.

I tested this in my lab, but using SAMFS.

[1] Backup on an encrypted tape:

2014/09/17 06:59:23 3003 [2276:7] tape2.c:2208 all Label AAC563 2014/02/26 08:22:05 blocksize = 262144
2014/09/17 06:59:23 4013 [2276:7] ../common/drive.c:625 detail Scanned 0:AAC563
2014/09/17 06:59:23 1020 [2276:7] scsi_cmd.c:1941 detail Close 10, open count = 0
2014/09/17 06:59:23 1047 [2276:13] mount.c:114 detail Load VSN AAC563
2014/09/17 06:59:23 1050 [2276:13] mount.c:147 detail Open /dev/rmt/1cbn as 10, open count = 1
2014/09/17 06:59:23 3233 [2276:13] tape2.c:131 detail Position timeout set to 1800 secs for 529
2014/09/17 06:59:23 3066 [2276:13] tape2.c:174 time Positioning time: 0 seconds
2014/09/17 06:59:23 3093 [2276:13] tape2.c:207 detail Positioned to 0x4
2014/09/17 06:59:23 3213 [2276:13] tape2.c:1388 detail Read capacity 781241344 : 3 0x0,0xb,0xa4,0x33
2014/09/17 06:59:23 0000 [2276:13] tape.c:613 all read label at position 0x4
2014/09/17 06:59:23 0000 [2276:13] tape.c:627 all read label length 80 EOF1
2014/09/17 06:59:23 3059 [2276:13] tape.c:960 detail append_tape: Found EOF1 at 0x4
2014/09/17 06:59:23 3213 [2276:13] tape2.c:1388 detail Read capacity 781241344 : 3 0x0,0xb,0xa4,0x33
2014/09/17 06:59:23 1059 [2276:13] dir_io.c:320 detail Ready for data transfer
2014/09/17 06:59:34 1066 [2276:13] dir_io.c:477 time Wrote 1074003968 bytes, time 11 seconds
2014/09/17 06:59:34 3205 [2276:13] tape.c:149 resource ptr: 0xfeae6a70, process_eox: 0, process_wtm: 0, wrote_tm: 0
2014/09/17 06:59:34 3220 [2276:13] tape.c:158 detail Creating EOF/EOV label
2014/09/17 06:59:34 3237 [2276:13] tape.c:315 detail Write TM at 0x1005
2014/09/17 06:59:37 3213 [2276:13] tape2.c:1388 detail Read capacity 780250112 : 3 0x0,0xb,0xa0,0x6b
2014/09/17 06:59:37 3203 [2276:13] tape.c:351 detail Check for End of Tape : eot 0x0 read_pos err 0x0
2014/09/17 06:59:37 3046 [2276:13] tape.c:419 detail Writing EOF at 0x1006
2014/09/17 06:59:37 0000 [2276:13] tape.c:591 all position of label write 0x1006
2014/09/17 06:59:37 3238 [2276:13] tape.c:483 detail Write 2 TMs at 0x1007

==> you see that we were able to write to the tape.
==> i unenrolled the drive.

[2] Restoring from it:

2014/09/17 07:08:27 0000 [2276:7] tape.c:613 all read label at position 0
2014/09/17 07:08:27 0000 [2276:7] tape.c:625 Error: read label 13 Permission denied
2014/09/17 07:08:27 0000 [2276:7] dev_log.c:304 all cdb - 34 00 00 00 00 00 00 00
2014/09/17 07:08:27 0000 [2276:7] dev_log.c:306 all 00 00 00 00 00 00 00 00
2014/09/17 07:08:27 0000 [2276:7] dev_log.c:331 all sense - 00 00 00 00 00 00 00 00 00 00
2014/09/17 07:08:27 0000 [2276:7] dev_log.c:333 all 00 00 00 00 00 00 00 00 00 00
2014/09/17 07:08:27 3120 [2276:7] tape2.c:1954 detail Process labels: rewinding

==> This is the typical error when you try to read an encrypted media on an unencrypted drive.

014/09/17 10:27:04 0000 [2750:7] tape.c:613 all read label at position 0
2014/09/17 10:27:04 0000 [2750:7] tape.c:625 Error: read label 5 I/O error
2014/09/17 10:27:04 0000 [2750:7] dev_log.c:304 all cdb - 34 00 00 00 00 00 00 00
2014/09/17 10:27:04 0000 [2750:7] dev_log.c:306 all 00 00 00 00 00 00 00 00
2014/09/17 10:27:04 0000 [2750:7] dev_log.c:331 all sense - 00 00 00 00 00 00 00 00 00 00
2014/09/17 10:27:04 0000 [2750:7] dev_log.c:333 all 00 00 00 00 00 00 00 00 00 00
2014/09/17 10:27:04 3015 [2750:7] gen_labels.c:483 detail Write label - rewinding
2014/09/17 10:27:04 1154 [2750:7] scsi_cmd.c:1992 detail Perform Test Unit Ready (TUR): Slot 0: Starting TUR
2014/09/17 10:27:04 1013 [2750:7] scsi_cmd.c:2355 time Slot 0: Ready time 0 seconds
2014/09/17 10:27:04 3021 [2750:7] gen_labels.c:636 all Writing labels
2014/09/17 10:27:04 3022 [2750:7] gen_labels.c:640 detail Writing labels - vol1
2014/09/17 10:27:04 0000 [2750:7] tape.c:591 all position of label write 0
2014/09/17 10:27:04 0000 [2750:7] tpverify.c:122 all Removed li. defect
2014/09/17 10:27:04 0000 [2750:7] tpverify.c:122 all Removed li.AAC563 defect
2014/09/17 10:27:04 3023 [2750:7] gen_labels.c:652 detail Writing labels - hdr1
2014/09/17 10:27:04 0000 [2750:7] tape.c:591 all position of label write 0x1
2014/09/17 10:27:04 3024 [2750:7] gen_labels.c:659 detail Writing labels - hdr2
2014/09/17 10:27:04 0000 [2750:7] tape.c:591 all position of label write 0x2
2014/09/17 10:27:04 3205 [2750:7] tape.c:149 resource ptr: 0x0, process_eox: 0, process_wtm: 0, wrote_tm: 0

==> I wrote a new label on it and as normal you start the process by trying to find an existing label, which you are unable to read, but you see that he goes further and writes a label on it.

new:
  mode: -rw-r--r-- links: 1 owner: root group: root
  length: 1073742012 admin id: 0 inode: 11036.5
  project: user.root(1)
  archdone;
  copy 1: ------ Sep 17 10:29 4.1 li AAC563

2014/09/17 10:29:31 1047 [2750:10] mount.c:114 detail Load VSN AAC563
2014/09/17 10:29:31 1050 [2750:10] mount.c:147 detail Open /dev/rmt/1cbn as 11, open count = 1
2014/09/17 10:29:31 3233 [2750:10] tape2.c:131 detail Position timeout set to 1800 secs for 529
2014/09/17 10:29:31 3066 [2750:10] tape2.c:174 time Positioning time: 0 seconds
2014/09/17 10:29:31 3093 [2750:10] tape2.c:207 detail Positioned to 0x4
2014/09/17 10:29:31 3213 [2750:10] tape2.c:1388 detail Read capacity 781243392 : 3 0x0,0xb,0xa4,0x35
2014/09/17 10:29:31 0000 [2750:10] tape.c:613 all read label at position 0x4
2014/09/17 10:29:31 0000 [2750:10] tape.c:627 all read label length 80 EOF1
2014/09/17 10:29:31 3059 [2750:10] tape.c:960 detail append_tape: Found EOF1 at 0x4
2014/09/17 10:29:31 3213 [2750:10] tape2.c:1388 detail Read capacity 781243392 : 3 0x0,0xb,0xa4,0x35
2014/09/17 10:29:31 1059 [2750:10] dir_io.c:320 detail Ready for data transfer
2014/09/17 10:29:43 1066 [2750:10] dir_io.c:477 time Wrote 1074003968 bytes, time 12 seconds
2014/09/17 10:29:43 3205 [2750:10] tape.c:149 resource ptr: 0xfeae6a70, process_eox: 0, process_wtm: 0, wrote_tm: 0
2014/09/17 10:29:43 3220 [2750:10] tape.c:158 detail Creating EOF/EOV label
2014/09/17 10:29:43 3237 [2750:10] tape.c:315 detail Write TM at 0x1005
2014/09/17 10:29:46 3213 [2750:10] tape2.c:1388 detail Read capacity 780254208 : 3 0x0,0xb,0xa0,0x6f
2014/09/17 10:29:46 3203 [2750:10] tape.c:351 detail Check for End of Tape : eot 0x0 read_pos err 0x0
2014/09/17 10:29:46 3046 [2750:10] tape.c:419 detail Writing EOF at 0x1006
2014/09/17 10:29:46 0000 [2750:10] tape.c:591 all position of label write 0x1006
2014/09/17 10:29:46 3238 [2750:10] tape.c:483 detail Write 2 TMs at 0x1007
2014/09/17 10:29:48 1067 [2750:10] dir_io.c:501 Io_count: diff 4098, count 4097
2014/09/17 10:29:48 1053 [2750:10] mount.c:209 detail Close 11, open count = 0

==> Writing to the unencrypted tape.

Attachments

This solution has no attachment